Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This study evaluates the post-quantum readiness of Internet communication systems by analyzing TLS deployments across 32,011 domains, revealing that while modern protocols like TLS 1.3 are being adopted, a significant 15.70% of domains in critical sectors still rely on the outdated TLS 1.2. The analysis shows that nearly half of the domains support hybrid post-quantum key exchange mechanisms, but there is a concerning 0% adoption of hybrid post-quantum certificates, leaving the authentication layer exposed to quantum threats. The findings underscore the urgent need for a coordinated transition across both key exchange mechanisms and certificate infrastructures to mitigate vulnerabilities to quantum-enabled attacks.
Despite advancements in TLS protocols, critical sectors remain alarmingly unprepared for quantum threats, with 15.70% still using outdated security measures.
The emergence of quantum computing presents a fundamental challenge to the security of current Internet communication systems. Transport Layer Security (TLS), which forms the backbone of secure web communication, predominantly relies on classical public-key cryptographic algorithms such as RSA and elliptic curve cryptography (ECC), both of which are susceptible to quantum attacks. This paper conducts a large scale empirical evaluation of post-quantum readiness across 32,011 domains, with a primary focus on real-world TLS deployments across diverse sectors by analysing negotiated TLS parameters, including protocol versions, cipher suites, key exchange mechanisms, and certificates. The results indicate that while modern protocols like TLS 1.3 and QUIC are gaining adoption, 15.70% of domains especially in critical sectors such as banking and government still rely on TLS 1.2. Furthermore, 49.3% of domains support hybrid post-quantum key exchange mechanisms (e.g., MLKEM768 with X25519), whereas 50.7% continue to use classical key exchange, reflecting partial transition. Notably, 0% adoption of hybrid post-quantum certificates was observed, leaving the authentication layer vulnerable to quantum-enabled attacks such as certificate forgery. The findings reveal uneven adoption of post-quantum mechanisms across sectors, where technology driven platforms are advancing more rapidly than legacy-dependent infrastructures. Overall, the study highlights that achieving complete quantum resilience requires a coordinated transition not only in key exchange mechanisms but also in certificate infrastructures. Without such comprehensive migration, Internet communication systems remain vulnerable to long-term threats, including Harvest-Now-Decrypt-Later (HNDL) attacks.